CRITICALVulnerability
Verified
Global

NVD CRITICAL: CVE-2026-75650 — Adobe Commerce is affected by an Improper Neutralization of Special Elements Use...

·Source: NIST NVD

Updated:

Executive Summary

Adobe Commerce is affected by an Improper Neutralization of Special Elements Used in a Template Engine vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue does not require user interaction. Scope is changed.

Analysis

Adobe Commerce is affected by an Improper Neutralization of Special Elements Used in a Template Engine vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue does not require user interaction. Scope is changed. CVSS Score: 10. Published: 2026-09-07T21:17:30.863.

Indicators of Compromise (1)

CVE (1)
CVE-2026-75650
NVDMITRE CVE
Source Attribution

Originally published by NIST NVD on Sep 7, 2026. Verified by: NIST.

Related Threats

CRITICALZero Day

October Patch Tuesday roundup: Over 1,400 Microsoft holes to be plugged, including three zero days

Microsoft released a record-shattering 1,407 CVEs to be plugged today on October Patch Tuesday, breaking the 2020 record of 1,261. The list was so long that its release was several hours later than the usual 1 p.m. Eastern drop time, somewhat frustrating admins. The bugs include three zero-day vulnerabilities, one of which has been exploited. The zero day being exploited, and that should be dealt

CVE-2026-96951CVE-2026-21510
CSO Online
CRITICALZero Day

September 2026 Patch Tuesday roundup: Plugs for two zero day holes among almost 1,000 fixes in Windows

Possibly wormable bugs and two zero-day holes highlight the almost 1,000 fixes issued today by Microsoft in its September Patch Tuesday release . The 964 vulnerabilities, another record since Microsoft began using AI in the middle of the year to find holes, require customer action. Excluded are 174 third-party/open-source CVEs and 23 Chromium/Edge CVEs, as well as nine Microsoft mitigated vulnerab

CVE-2026-85880CVE-2026-81963
CSO Online
CRITICALZero Day

Adobe Patches Over 170 Vulnerabilities, Including Commerce Zero-Day

Tracked as CVE-2026-75650, the exploited defect allows unauthenticated attackers to execute arbitrary code. The post Adobe Patches Over 170 Vulnerabilities, Including Commerce Zero-Day appeared first on SecurityWeek .

CVE-2026-75650
SecurityWeek